$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/UyZZpkeLlY840Q8xcceC1e35ycY.roa File: UyZZpkeLlY840Q8xcceC1e35ycY.roa (raw, json) Hash identifier: FA6071bHkpQeGkWtUd6Ikk9STcbgmbl0EwCNHwUb0Dk= Subject key identifier: 53:26:59:A6:47:8B:95:8F:38:D1:0F:31:71:C7:82:D5:ED:F9:C9:C6 Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07 Certificate serial: 301A Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/UyZZpkeLlY840Q8xcceC1e35ycY.roa Signing time: Mon 26 Aug 2024 05:29:08 +0000 ROA not before: Mon 26 Aug 2024 05:29:08 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 9924 IP address blocks: 211.76.120.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Nov 2024 20:24:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12314 (0x301a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07 Validity Not Before: Aug 26 05:29:08 2024 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=532659A6478B958F38D10F3171C782D5EDF9C9C6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:f8:60:33:88:b4:81:4f:dd:71:72:4c:5e:30: 75:24:2e:5e:21:60:8c:b9:14:a0:4e:08:f0:13:a7: 21:ea:de:40:c1:88:55:94:9d:37:a6:99:60:7f:d7: 0e:56:40:25:11:41:de:87:dc:ac:03:41:e0:3b:44: 26:f0:9d:8d:de:30:18:e0:3c:e0:20:58:b6:3e:19: ab:90:be:75:80:43:1c:27:47:0e:be:8c:5b:ee:4d: 80:53:95:52:6f:85:6d:9f:f8:73:7d:ba:1c:21:96: 11:a5:61:3f:bf:5e:98:71:ea:ba:16:79:ee:03:98: a3:27:c1:b9:a9:d8:e8:ac:47:8d:89:8f:b0:00:ba: 0d:dc:34:da:56:c1:4e:2d:de:e3:98:c3:84:07:9b: 42:bd:06:b6:8c:6c:a2:8b:8e:a1:a1:bd:aa:49:66: 76:4f:7d:06:5c:8b:98:08:30:6e:3d:aa:70:4f:ad: 2e:3e:da:0f:78:a8:d4:f3:73:a2:73:b8:4d:40:d8: 6b:a6:3b:1f:b1:da:57:07:6c:b9:d4:b3:62:8c:41: 13:c0:50:86:f6:25:3d:54:bf:22:b0:5f:c8:80:14: c3:af:f0:db:cb:d1:c4:87:90:07:b0:5a:b6:56:34: f9:5e:48:10:a3:f8:c8:87:d5:12:2b:f2:17:05:52: 47:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:26:59:A6:47:8B:95:8F:38:D1:0F:31:71:C7:82:D5:ED:F9:C9:C6 X509v3 Authority Key Identifier: keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/UyZZpkeLlY840Q8xcceC1e35ycY.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 211.76.120.0/24 Signature Algorithm: sha256WithRSAEncryption 06:bf:f2:3b:7c:a8:8c:ed:ad:6f:61:ae:1f:fa:3b:d0:04:c6: 49:bf:a9:bf:e2:08:d2:28:64:3a:30:42:5f:01:cd:5c:fc:bd: 0d:23:b7:b3:0e:70:b9:27:80:ba:8c:d8:3c:ae:5b:09:75:70: fb:f7:5c:86:0d:75:cb:90:bc:7d:a9:ee:c7:e1:f6:a2:21:5c: f8:56:0f:7e:a2:e3:ca:38:63:9f:90:bd:6d:31:1a:db:27:24: 86:6c:1f:85:3e:67:e0:8b:86:d1:4c:ce:f7:17:30:29:1e:ac: 70:21:a4:83:be:a0:95:69:b5:c0:f9:69:b0:90:42:d0:6d:d0: 7b:f6:db:93:63:c6:76:87:ea:e1:17:7d:9a:57:b9:66:11:58: b7:80:3d:7e:03:f2:0b:e2:5a:12:ca:c2:f6:f8:24:97:25:d0: 5a:70:99:59:5e:5b:b5:0c:c7:f0:29:9d:0b:fd:b6:80:83:10: b3:f6:74:cb:4d:3e:ba:f4:de:21:29:b3:37:8e:3d:9b:d4:26: 88:87:04:d7:44:3f:48:30:39:5d:f6:81:6f:fa:ce:7e:54:06: 23:7b:72:6b:92:2b:ea:00:50:62:c0:1e:59:0d:ed:cc:0b:68: f2:36:bf:fd:6e:52:39:5c:12:14:11:e7:65:bf:5b:fd:35:f3: 37:14:fc:e2 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICMBowDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2 NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yNDA4MjYw NTI5MDhaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDUzMjY1OUE2NDc4Qjk1 OEYzOEQxMEYzMTcxQzc4MkQ1RURGOUM5QzYwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDf+GAziLSBT91xckxeMHUkLl4hYIy5FKBOCPATpyHq3kDBiFWU nTemmWB/1w5WQCURQd6H3KwDQeA7RCbwnY3eMBjgPOAgWLY+GauQvnWAQxwnRw6+ jFvuTYBTlVJvhW2f+HN9uhwhlhGlYT+/Xphx6roWee4DmKMnwbmp2OisR42Jj7AA ug3cNNpWwU4t3uOYw4QHm0K9BraMbKKLjqGhvapJZnZPfQZci5gIMG49qnBPrS4+ 2g94qNTzc6JzuE1A2GumOx+x2lcHbLnUs2KMQRPAUIb2JT1UvyKwX8iAFMOv8NvL 0cSHkAewWrZWNPleSBCj+MiH1RIr8hcFUkerAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUUyZZpkeLlY840Q8xcceC1e35ycYwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL1V5Wlpwa2VMbFk4NDBROHhj Y2VDMWUzNXljWS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBADT THgwDQYJKoZIhvcNAQELBQADggEBAAa/8jt8qIztrW9hrh/6O9AExkm/qb/iCNIo ZDowQl8BzVz8vQ0jt7MOcLkngLqM2DyuWwl1cPv3XIYNdcuQvH2p7sfh9qIhXPhW D36i48o4Y5+QvW0xGtsnJIZsH4U+Z+CLhtFMzvcXMCkerHAhpIO+oJVptcD5abCQ QtBt0Hv225NjxnaH6uEXfZpXuWYRWLeAPX4D8gviWhLKwvb4JJcl0FpwmVleW7UM x/ApnQv9toCDELP2dMtNPrr03iEpszeOPZvUJoiHBNdEP0gwOV32gW/6zn5UBiN7 cmuSK+oAUGLAHlkN7cwLaPI2v/1uUjlcEhQR52W/W/018zcU/OI= -----END CERTIFICATE-----Generated at Mon Nov 25 17:14:20 2024 by rpki-client on console-ams.rpki-client.org